Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
Cardstream
Payments
Cardstream is a multi-award-winning PCI DSS Level 1 independent payments gateway, providing white-label Partner resellers with access to
CE
Cardtech Ecuatoriana
cardtechcorp.com
CARDTECH ENTERPRISES
cardtechonline.com
Cargas Systems
Finance and accounting
Our software helps accounting, operations, and sales and marketing teams get more done by making every process
Cartex
Networking
Harness Cartex’s capabilities to consolidate payment gateways, telecom, and card
cartispayments
Payments
Payment gateway, POS, ecommerce & developer APIs for US &
Casap Technologies
No-code and automation
Casap is an award-winning dispute automation platform that streamlines compliance, reduces operational costs, and enhances consumer
Cashfree Payments India Private
Payments
Next-gen digital payments provider for India.
Astryx
Crypto and web3
Send, receive, and spend crypto stablecoins, digital dollars and assets worldwide with
CASH MOOV
cashmoov.net
Cause Vision Project Management
cause.vision
Cause Vision is building a more accessible, transparent, and human financial future powered by
CBC Companies
cbccompanies.com
Credit Card Industry
cbsmerchant.com
GP
Golden Power Credit Finance
cce.so
CP
CC PAY ONLINE
ccpayonline.com
CG
CELLULANT GHANA
cellulant.com
CELLULANT CAMEROON
cellulant.io
CeloPay
Payments
CeloPay is a web-based application for securely collecting payment information from your guests or
Central Payments
Payments
Discover a better way to embedded
CENTRALPAY
Payments
Une plateforme de paiement en ligne qui simplifie l'encaissement, le traitement et le transfert des règlements clients des entreprises
Bay 2
centre-commercial.fr
Eurobill Tech
Payments
Unlock global payment possibilities with
SALEM INTERNACIONAL SA CV
centum.mx
Centum - Innovando Seriamente
Chain App
DevOps and observability
Chain provides enterprise-grade stablecoin infrastructure powering payments at
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read